What is CVE-2026-23596?

CVE-2026-23596 is a medium-severity vulnerability in Hewlett Packard Enterprise (Hpe) Hpe Aruba Networking Private 5g Core, classified under Uncontrolled Resource Consumption. CVSS score: 6.5/10. Published 2026-02-17.

How severe is CVE-2026-23596?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Resource exhaustion in Hewlett Packard Enterprise (Hpe) Hpe Aruba Networking Private 5g Core

CVE-2026-23596

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.002 (15.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Hewlett Packard Enterprise (Hpe) Hpe Aruba Networking Private 5g Core — versions 1.24.3.0
Hpe Aruba_networking_private_5g_core

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

security-alert@hpe.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2026-23596?: CVE-2026-23596 is a medium-severity vulnerability in Hewlett Packard Enterprise (Hpe) Hpe Aruba Networking Private 5g Core, classified under Uncontrolled Resource Consumption. CVSS score: 6.5/10. Published 2026-02-17.
How severe is CVE-2026-23596?: Medium severity. CVSS v3 base score is 6.5 out of 10.